$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba84198b-638f-37a4-9c37-d994b793bec9.roa File: ba84198b-638f-37a4-9c37-d994b793bec9.roa (raw, json) Hash identifier: xkrBB2ZIYJ+DcCM1ZtMEXqSkKaH02daX19JYqq/DoRk= Subject key identifier: 31:67:42:2E:7D:62:04:A5:0D:2A:14:D8:63:16:97:C2:C6:7B:53:5B Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F4328584B5141ED3046136C0C6A8DF3C0 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba84198b-638f-37a4-9c37-d994b793bec9.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 41264 IP address blocks: 104.132.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:ed:30:46:13:6c:0c:6a:8d:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=889aafe3-d1d4-4647-ba2a-46c1dd155dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:97:18:dc:1b:48:a4:cf:55:86:fc:ec:5a: 67:6e:94:56:8c:5c:57:42:c5:3d:01:42:5c:84:74: a2:a8:45:1c:10:86:bd:40:35:b0:6a:04:08:b9:35: e2:2a:80:e1:2d:90:d6:8b:1d:39:02:13:57:8e:60: 11:30:c9:2e:dd:de:a0:d2:4e:38:0a:c3:39:68:c6: 10:04:cb:de:c9:b7:c4:7b:a6:01:c1:a3:38:ef:79: 25:d7:4b:c1:26:15:59:7a:b8:21:36:aa:41:2a:f4: cc:4f:4a:5a:ae:09:ae:66:54:4d:fc:b3:67:2e:ca: d4:07:bc:e1:0a:f5:e8:31:02:98:39:74:b0:94:48: da:81:7c:b7:49:9e:f8:02:26:8a:c7:64:88:1b:be: 38:fa:39:cb:a3:45:1f:e7:f4:23:34:f2:6e:f7:f3: 2e:53:e3:14:e5:d3:05:50:54:a8:89:86:a7:90:18: e3:e7:0d:38:c1:9c:69:c0:c0:dc:14:af:ca:75:95: be:6d:b0:c7:fb:79:3a:73:b5:80:90:16:3c:5e:19: 9e:42:54:24:37:9c:28:27:a1:aa:11:7d:db:ed:99: 5b:75:5a:88:04:8a:02:5e:f3:6a:a3:dc:0d:69:b4: 4a:8d:36:f9:89:fb:a8:a2:f4:79:b9:bf:7e:f5:7b: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:67:42:2E:7D:62:04:A5:0D:2A:14:D8:63:16:97:C2:C6:7B:53:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba84198b-638f-37a4-9c37-d994b793bec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.132.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3d:2d:46:05:c0:4e:65:5d:0c:58:bb:ef:2c:d2:b6:b8:2c: 25:f1:8a:fc:9e:c4:5b:f8:ba:d7:84:4c:23:89:76:c4:96:ea: 21:bd:14:23:ee:8a:7d:57:4d:d8:be:dd:ad:c2:13:6d:85:56: 5c:c4:33:4d:6f:ec:a7:b6:43:2a:cd:a2:06:2d:61:da:d5:57: fe:fe:a3:a2:b4:44:b9:cd:ee:1a:60:17:01:61:b1:39:74:a7: 12:e6:02:be:52:f3:b4:c2:d2:3b:15:0c:3f:6d:92:e3:ae:79: b8:7c:ea:f4:3a:cf:33:25:df:73:70:b2:6c:b2:a3:e3:54:75: f4:da:ea:7f:2e:7b:d3:47:6c:3a:93:8d:27:da:d3:7d:31:b5: 50:99:e3:12:b8:9d:e3:06:a7:e0:ff:ef:68:e2:b6:09:0d:28: fa:47:c3:d7:b2:4f:ca:da:55:30:d7:f0:d6:a9:7c:d9:2f:08: 2c:ff:a2:dd:c2:80:a4:74:8e:23:e2:86:87:ed:2c:e2:cb:21: 64:c8:61:52:b6:0a:ab:95:eb:03:34:45:10:c5:c8:07:ca:ac: 92:6c:8f:c6:7e:63:08:9b:a8:e4:48:7d:af:21:6e:38:c4:4e: dc:b3:ce:c1:71:47:9e:53:56:83:2b:6b:16:9f:af:5d:c0:74: a6:09:14:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQe0wRhNsDGqN88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk ODg5YWFmZTMtZDFkNC00NjQ3LWJhMmEtNDZjMWRkMTU1ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBeXGNwbSKTPVYb87FpnbpRWjFxXQsU9AUJc hHSiqEUcEIa9QDWwagQIuTXiKoDhLZDWix05AhNXjmARMMku3d6g0k44CsM5aMYQ BMveybfEe6YBwaM473kl10vBJhVZerghNqpBKvTMT0pargmuZlRN/LNnLsrUB7zh CvXoMQKYOXSwlEjagXy3SZ74AiaKx2SIG744+jnLo0Uf5/QjNPJu9/MuU+MU5dMF UFSoiYankBjj5w04wZxpwMDcFK/KdZW+bbDH+3k6c7WAkBY8XhmeQlQkN5woJ6Gq EX3b7ZlbdVqIBIoCXvNqo9wNabRKjTb5ifuoovR5ub9+9XuUvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFnQi59YgSlDSoU2GMWl8LGe1NbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYmE4NDE5OGItNjM4Zi0z N2E0LTljMzctZDk5NGI3OTNiZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk9LUYFwE5lXQxYu+8s0ra4LCXxivyexFv4uteETCOJdsSW6iG9FCPu in1XTdi+3a3CE22FVlzEM01v7Ke2QyrNogYtYdrVV/7+o6K0RLnN7hpgFwFhsTl0 pxLmAr5S87TC0jsVDD9tkuOuebh86vQ6zzMl33Nwsmyyo+NUdfTa6n8ue9NHbDqT jSfa030xtVCZ4xK4neMGp+D/72jitgkNKPpHw9eyT8raVTDX8NapfNkvCCz/ot3C gKR0jiPihoftLOLLIWTIYVK2CquV6wM0RRDFyAfKrJJsj8Z+YwibqORIfa8hbjjE TtyzzsFxR55TVoMraxafr13AdKYJFDg= -----END CERTIFICATE-----Generated at Thu Oct 9 20:03:12 2025 by rpki-client